From d98596c0018e2d5345d88147bd71eec12aa5e5d0 Mon Sep 17 00:00:00 2001
From: Aselsan <syamsuddine9@gmail.com>
Date: Fri, 19 Jul 2024 04:12:32 +0700
Subject: [PATCH 1/7] escaping string for prevention of XSS attacks.

---
 src/Views/email_2fa_show.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/Views/email_2fa_show.php b/src/Views/email_2fa_show.php
index 58d69ae54..52c138591 100644
--- a/src/Views/email_2fa_show.php
+++ b/src/Views/email_2fa_show.php
@@ -1,4 +1,4 @@
-<?= $this->extend(config('Auth')->views['layout']) ?>
+a<?= $this->extend(config('Auth')->views['layout']) ?>
 
 <?= $this->section('title') ?><?= lang('Auth.email2FATitle') ?> <?= $this->endSection() ?>
 
@@ -12,7 +12,7 @@
             <p><?= lang('Auth.confirmEmailAddress') ?></p>
 
             <?php if (session('error')) : ?>
-                <div class="alert alert-danger"><?= session('error') ?></div>
+                <div class="alert alert-danger"><?= esc(session('error')) ?></div>
             <?php endif ?>
 
             <form action="<?= url_to('auth-action-handle') ?>" method="post">

From bcf9cd29ba987348d9722c5bc181695cbfc99154 Mon Sep 17 00:00:00 2001
From: Aselsan <syamsuddine9@gmail.com>
Date: Fri, 19 Jul 2024 04:12:56 +0700
Subject: [PATCH 2/7] escaping string for prevention of XSS attacks.

---
 src/Views/email_2fa_verify.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/Views/email_2fa_verify.php b/src/Views/email_2fa_verify.php
index dbaac3067..e861ed5d6 100644
--- a/src/Views/email_2fa_verify.php
+++ b/src/Views/email_2fa_verify.php
@@ -1,4 +1,4 @@
-<?= $this->extend(config('Auth')->views['layout']) ?>
+(<?= $this->extend(config('Auth')->views['layout']) ?>
 
 <?= $this->section('title') ?><?= lang('Auth.email2FATitle') ?> <?= $this->endSection() ?>
 
@@ -12,7 +12,7 @@
             <p><?= lang('Auth.emailConfirmCode') ?></p>
 
             <?php if (session('error') !== null) : ?>
-            <div class="alert alert-danger"><?= session('error') ?></div>
+            <div class="alert alert-danger"><?= esc(session('error')) ?></div>
             <?php endif ?>
 
             <form action="<?= url_to('auth-action-verify') ?>" method="post">

From 1cc1752c240c49bc7f875a9f698dcb7343a8d953 Mon Sep 17 00:00:00 2001
From: Aselsan <syamsuddine9@gmail.com>
Date: Fri, 19 Jul 2024 04:13:16 +0700
Subject: [PATCH 3/7] escaping string for prevention of XSS attacks.

---
 src/Views/email_activate_show.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Views/email_activate_show.php b/src/Views/email_activate_show.php
index 6b41d4626..73e829912 100644
--- a/src/Views/email_activate_show.php
+++ b/src/Views/email_activate_show.php
@@ -10,7 +10,7 @@
             <h5 class="card-title mb-5"><?= lang('Auth.emailActivateTitle') ?></h5>
 
             <?php if (session('error')) : ?>
-                <div class="alert alert-danger"><?= session('error') ?></div>
+                <div class="alert alert-danger"><?= esc(session('error')) ?></div>
             <?php endif ?>
 
             <p><?= lang('Auth.emailActivateBody') ?></p>

From c0f03323caffeb5112b091b939501acc189f7e52 Mon Sep 17 00:00:00 2001
From: Aselsan <syamsuddine9@gmail.com>
Date: Fri, 19 Jul 2024 04:16:58 +0700
Subject: [PATCH 4/7] escaping string for prevention of XSS attacks.

---
 src/Views/login.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/Views/login.php b/src/Views/login.php
index 838734b44..4fd0232cb 100644
--- a/src/Views/login.php
+++ b/src/Views/login.php
@@ -10,22 +10,22 @@
                 <h5 class="card-title mb-5"><?= lang('Auth.login') ?></h5>
 
                 <?php if (session('error') !== null) : ?>
-                    <div class="alert alert-danger" role="alert"><?= session('error') ?></div>
+                    <div class="alert alert-danger" role="alert"><?= esc(session('error')) ?></div>
                 <?php elseif (session('errors') !== null) : ?>
                     <div class="alert alert-danger" role="alert">
                         <?php if (is_array(session('errors'))) : ?>
                             <?php foreach (session('errors') as $error) : ?>
-                                <?= $error ?>
+                                <?= esc($error) ?>
                                 <br>
                             <?php endforeach ?>
                         <?php else : ?>
-                            <?= session('errors') ?>
+                            <?= esc(session('errors')) ?>
                         <?php endif ?>
                     </div>
                 <?php endif ?>
 
                 <?php if (session('message') !== null) : ?>
-                <div class="alert alert-success" role="alert"><?= session('message') ?></div>
+                    <div class="alert alert-success" role="alert"><?= esc(session('message')) ?></div>
                 <?php endif ?>
 
                 <form action="<?= url_to('login') ?>" method="post">

From fb895d9b843dfe16b5a0073830f3f009e9c91fbe Mon Sep 17 00:00:00 2001
From: Aselsan <syamsuddine9@gmail.com>
Date: Fri, 19 Jul 2024 04:18:15 +0700
Subject: [PATCH 5/7] escaping string for prevention of XSS attacks.

---
 src/Views/register.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/Views/register.php b/src/Views/register.php
index 57726e8e8..96f6f6978 100644
--- a/src/Views/register.php
+++ b/src/Views/register.php
@@ -10,16 +10,16 @@
                 <h5 class="card-title mb-5"><?= lang('Auth.register') ?></h5>
 
                 <?php if (session('error') !== null) : ?>
-                    <div class="alert alert-danger" role="alert"><?= session('error') ?></div>
+                    <div class="alert alert-danger" role="alert"><?= esc(session('error')) ?></div>
                 <?php elseif (session('errors') !== null) : ?>
                     <div class="alert alert-danger" role="alert">
                         <?php if (is_array(session('errors'))) : ?>
                             <?php foreach (session('errors') as $error) : ?>
-                                <?= $error ?>
+                                <?= esc($error) ?>
                                 <br>
                             <?php endforeach ?>
                         <?php else : ?>
-                            <?= session('errors') ?>
+                            <?= esc(session('errors')) ?>
                         <?php endif ?>
                     </div>
                 <?php endif ?>

From 2424dee71fe570f45188620991208dc0fcdbcf4a Mon Sep 17 00:00:00 2001
From: Aselsan <syamsuddine9@gmail.com>
Date: Fri, 19 Jul 2024 16:58:41 +0700
Subject: [PATCH 6/7] update typo

---
 src/Views/email_2fa_show.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Views/email_2fa_show.php b/src/Views/email_2fa_show.php
index 52c138591..dc21e6ff1 100644
--- a/src/Views/email_2fa_show.php
+++ b/src/Views/email_2fa_show.php
@@ -1,4 +1,4 @@
-a<?= $this->extend(config('Auth')->views['layout']) ?>
+<?= $this->extend(config('Auth')->views['layout']) ?>
 
 <?= $this->section('title') ?><?= lang('Auth.email2FATitle') ?> <?= $this->endSection() ?>
 

From 9e283d3e365b219b2944a312573ec89c2f2323c9 Mon Sep 17 00:00:00 2001
From: Aselsan <syamsuddine9@gmail.com>
Date: Fri, 19 Jul 2024 16:58:55 +0700
Subject: [PATCH 7/7] update typo

---
 src/Views/email_2fa_verify.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Views/email_2fa_verify.php b/src/Views/email_2fa_verify.php
index e861ed5d6..1b5b24eed 100644
--- a/src/Views/email_2fa_verify.php
+++ b/src/Views/email_2fa_verify.php
@@ -1,4 +1,4 @@
-(<?= $this->extend(config('Auth')->views['layout']) ?>
+<?= $this->extend(config('Auth')->views['layout']) ?>
 
 <?= $this->section('title') ?><?= lang('Auth.email2FATitle') ?> <?= $this->endSection() ?>